Malicious code in libosintstringcandy (PyPI)

Source: checkmarx fa68fa5573c396f0586e0dcf583f89d299cb09984e3dab61cca13c4395e0101c EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware --- Credit: OpenSSF source...